Hackers Exploit N-able Zero-Day for Crypto

Hackers actively exploit a newly disclosed N-able zero-day vulnerability dubbed 4EverAble2Shell to compromise servers and deploy cryptocurrency miners. Researchers report at least 21 affected systems, including 19 running the company's latest security update released on November 10. The attacks follow researcher Sean Bales' release of exploits on November 12, allowing unauthenticated attackers to gain root-level access to vulnerable N-central appliances.